
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
File: 792BA6283AAC11EF93D3E072C4F9AE02.roa (raw, json)
Hash identifier: s2bVsrhzb1oO7nVURRzU8xORUuB8waybrIzRlSHVXRY=
Subject key identifier: 4A:C8:93:F0:8C:6C:D6:0B:AE:D9:0E:18:E0:0F:C8:97:84:F6:48:68
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2051
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:12:54 +0000
ROA not before: Sat 30 Aug 2025 16:35:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 64079
IP address blocks: 203.56.50.0/24 maxlen: 24
203.56.51.0/24 maxlen: 24
203.86.118.0/24 maxlen: 24
203.86.119.0/24 maxlen: 24
203.86.120.0/24 maxlen: 24
203.86.121.0/24 maxlen: 24
203.86.122.0/24 maxlen: 24
203.86.123.0/24 maxlen: 24
203.86.124.0/24 maxlen: 24
203.86.125.0/24 maxlen: 24
220.247.138.0/24 maxlen: 24
220.247.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8273 (0x2051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48fb6-be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:cf:03:4a:61:cb:5e:ec:8d:0d:ae:77:ae:
d0:69:75:0d:fd:cf:b6:81:9c:d6:76:e6:e0:24:67:
7c:02:f5:a2:31:be:98:ab:60:b6:79:92:fe:e8:21:
90:92:aa:18:72:ca:56:bf:c9:4d:9b:d4:f2:7f:3a:
92:1a:e5:1c:83:b5:a4:b7:b6:9f:ab:8b:c6:30:60:
61:d0:1d:6b:63:5f:1b:38:3d:2f:c5:3b:7a:ee:fd:
b0:42:a4:b3:10:a6:6d:d5:aa:7e:07:4b:02:99:d4:
3b:c3:88:91:13:74:26:02:83:e7:6b:78:f7:f9:d4:
c3:fd:2a:a7:7c:98:b3:e1:9b:d4:bc:2d:bd:2d:cb:
0f:3d:da:dd:f1:d9:f7:0a:98:56:07:38:d7:9b:49:
67:94:91:68:c2:9d:2a:d1:5f:2f:e2:ed:08:2a:43:
c9:a6:27:13:5e:4d:c1:4b:79:b7:8b:85:20:e8:45:
18:c0:63:e2:f3:bb:2a:aa:ef:01:3b:65:0d:f8:37:
af:4a:66:82:09:b9:8a:e7:76:3a:52:c2:75:3e:31:
04:b7:ad:39:f9:3b:d9:b5:07:86:a3:ef:88:56:15:
49:6b:5c:a3:9c:44:d1:ee:b4:3b:80:ae:9d:bd:a2:
cf:87:1a:39:cb:ab:9a:83:51:b5:b8:08:1b:b4:bc:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:93:F0:8C:6C:D6:0B:AE:D9:0E:18:E0:0F:C8:97:84:F6:48:68
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.56.50.0/23
203.86.118.0-203.86.125.255
220.247.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:4a:68:5c:15:f7:25:0e:60:40:3e:dd:2f:2c:f3:e1:9d:f8:
6a:c5:b5:bb:d5:6e:7d:53:dc:fe:65:cd:6b:4a:08:53:c0:72:
07:a3:a3:b5:5e:9b:b9:49:b2:14:e8:f8:b1:9c:7a:97:f0:2f:
ba:68:dc:36:db:58:2c:36:24:35:e8:96:89:0f:a2:91:ac:97:
39:e2:1d:36:fb:f3:31:22:91:b8:79:ff:f9:58:bf:46:d2:3d:
af:a6:b7:0a:a6:98:a8:07:8d:90:fb:70:42:de:49:46:dd:61:
4a:4d:0c:b9:38:3f:f1:95:de:fc:f1:8b:68:45:c1:ee:c2:62:
6c:d5:30:34:0e:52:bc:52:fb:b6:9b:c9:cd:f7:eb:ec:35:28:
ee:40:37:5b:f9:d0:65:ca:94:78:4b:93:cd:46:6f:f8:0d:4c:
b4:00:17:f5:dc:05:75:bb:8e:ac:e1:2e:b3:dd:d6:43:bf:a5:
50:5f:a1:42:53:5c:ef:e2:52:a6:58:9e:88:4d:47:0f:a5:88:
a0:7b:99:80:25:f3:fb:8b:68:ea:33:b5:26:f1:49:cb:6e:a5:
da:56:aa:30:cb:63:c7:f0:43:1d:d8:a1:d6:ef:4c:3a:52:6a:
dc:6b:00:50:91:97:42:68:64:7a:93:de:53:81:7c:2b:2a:23:
17:bb:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:04 2026 by rpki-client